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Top Stories 

• The New Jersey Board of Utilities approved a $102.5 million New Jersey Natural Gas 
project meant to harden its distribution and transmission system from damage caused by 
severe storms. -Asbury Park Press (See item 2) 

• Six individuals were charged in connection with an alleged cybercrime ring that took over 
accounts on the online ticket marketplace StubHub, used victims’ payment cards to make 
purchases of around $1 million, and then launder the proceeds through accounts in several 
countries. - Help Net Security (See item 6) 

• Route 5 in Camdenton, Missouri, was closed for 6 hours after a fatal accident on the 
Niangua Bridge that killed four people and injured a fifth July 23. - KRCG 13 Jefferson 
City (See item 12) 

• The TerraMar Apartments complex under construction in Santa Rosa Beach, Florida, 
caught fire July 23, rendering the building a total loss and causing an estimated $2.75 
million in damage. - Fort Walton Beach Daily News (See item 33) 
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Energy Sector 



1. July 24, KXLY 4 Spokane - (Washington) Thousands without power following 
storm. More than 36,000 utility customers in Spokane remained without power July 24 
after a July 23 storm knocked out service and caused extensive damage to the area. 
Source: http://www.kxly.com/news/spokane-news/thousands-without-power-following- 
storm/27122852 

2. July 23, Asbury Park Press - (New Jersey) Gas utility will spend $102.5M on 
improvements. The New Jersey Board of Utilities approved a $102.5 million New 
Jersey Natural Gas project meant to harden its distribution and transmission system 
from damage caused by severe storms. The 5-year project will consist of six targeted 
projects meant to help mitigate the number and duration of outages and improve the 
utility’s ability to respond and control service outages. 

Source: http://www.app.com/storv/monev/business/2014/07/23/gas-utility-will-spend- 
m-improvements/13059399/ 

3. July 23, KOMO 4 Seattle - (Washington) Power restored after substation fire near 
Seattle Center. Authorities are investigating after electrical equipment at a Seattle City 
Light substation burst into flames July 23 knocking out power to several buildings in 
the Seattle Center and shutting down the monorail for more than 2 hours. Officials 
reported that a fire broke out in a capacitor bank at the substation. 

Source: http://www.komonews.com/news/local/Fire-at-Seattle-City-Light-substation- 
near-Seattle-Center-268308642.html 

4. July 23, Associated Press - (Arkansas) Storms lead to 39,000 without power. Energy 
Arkansas Inc. reported that 39,316 homes and businesses lost power July 23 due to 
severe storms that moved through Arkansas. 

Source: http://www.knoe.com/storv/26097147/storms-lead-to-39000-without-power 

T Return to top i 

Chemical Industry Sector 

Nothing to report 
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Nuclear Reactors, Materials, and Waste Sector 

Nothing to report 
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Critical Manufacturing Sector 

5. July 23, Detroit News - (International) GM calls back 822,000 vehicles in 6 new 
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recalls. General Motors announced 6 recalls July 23 for 822,685 vehicles, including 
717,950 in the U.S., with the largest recall affecting 475,000 vehicles from model years 
2010-2012 due to the potential for a seating bolt to fall out and allow seats to move. 
Source: http://www.detroitnews.com/article/20140723/AUT00103/307230099 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 

6. July 24, Help Net Security - (International) Six men charged in StubHub cyber-theft 
case. Six individuals were charged in the U.S. in connection with an alleged 
cybercrime ring that took over accounts on online ticket marketplace StubHub, used 
victims’ credit cards to purchase tickets to various entertainment events in New York 
City, sell the tickets, and then launder the proceeds through PayPal accounts and bank 
accounts in the U.S., U.K., Canada, Germany, and Russia. The alleged fraud totaled 
around $1 million and affected over 1,000 user accounts. 

Source: http://www.net-security.org/secworld.php?id=17164 

7. July 24, Associated Press - (Texas) Texan pleads guilty in oil, gas investment scam. 
A Fort Worth man pleaded guilty July 23 to running an investment scam by purporting 
to be the founder of a company called Blue Alpha Energy and soliciting around $5.8 
million from around 45 investors that was then diverted to accounts and businesses he 
controlled. 

Source: http://www.brownsvilleherald.com/news/texas/article 580a2054-334f-54eb- 
98cf-d0479364bf70.html 



For another story, see item 32 
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Transportation Systems Sector 

8. July 24, KFVS 12 Cape Girardeau - (Missouri) Train derailment closes roads near 
Dexter. Crews worked to clear the scene after 14 rail cars from a Union Pacific train 
headed to North Little Rock derailed near Dexter July 24. Several roads surrounding 
the site were closed. 

Source: http://www.kfvsl2.com/story/26100138/train-derailment-involving-hazrnat- 
closes-roads-near-dexter 

9. July 24, Associated Press - (Alaska) Alaska tourist train halts runs after 
derailment. Two vintage locomotives and four passenger rail cars from a White Pass 
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& Yukon Route tourist train headed into Canada from Skagway, Alaska, derailed July 
23 injuring nine people in White Pass Summit. Authorities are investigating the 
derailment and the rail company suspended operations until further notice. 

Source: http://news.msn.com/us/alaska-tourist-train-halts-runs-after-derailment 

10. July 24, CNN - (International) U.S. ends ban on flights into Israel’s Ben Gurion 
Airport. The U.S. Federal Aviation Administration announced July 23 that U.S. airline 
carriers were allowed to resume flights to and from Tel Aviv in Israel after a temporary 
ban was issued July 22 halting service due to reports of a rocket that that struck near the 
Ben Gurion International Airport. 

Source: http://www.cnn.com/2014/07/24/travel/israel-flights-suspended/index.html 

11. July 23, WTVD 11 Durham - (North Carolina) Police try to identify suspects in bus 
explosion, videos released. A homemade bomb that contained a mixture of drain 
cleaner and other materials exploded on the Bull City Connector bus in Durham July 22 
causing a nearby passenger and the driver to be treated for exposure. There was no 
significant damage to the bus and authorities are looking for three teens in connection 
to the explosion. 

Source: http://abcll.com/news/durham-police-investigate-explosion-on-bus/210334/ 

12. July 23, KRCG 13 Jefferson City - (Missouri) Fatal crash closes Niangua Bridge in 
Camden County. Route 5 in Camdenton was closed for 6 hours after a fatal accident 
on the Niangua Bridge that killed four people and injured a fifth July 23 when a dump 
truck crossed over the centerline and crashed into an oncoming vehicle. Officials 
determined that the dump truck’s tire went flat causing the driver to lose control. 

Source: http://www.connectmidmissouri.com/news/storv.aspx?id=1073821 

13. July 23, Portland Oregonian - (Oregon) Nehalem River Dredging Inc., leaks diesel 
into river; owners of abandoned fish hatchery fined: DEQ violations. Nehalem 
River Dredging Inc., was issued a $1 1,200 fine by the Oregon Department of 
Environmental Quality for allowing oil to enter the Nehalem River during maintenance 
activities in April 2013. The dredging company spilled diesel fuel on the vessel Eland, 
which entered the river. 

Source: 

http://www.oregonlive.com/business/index.ssf/2014/07/nehalem river dredging inc le 
a.html 



For another story, see item 3 
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Food and Agriculture Sector 

14. July 23, WPX1 11 Pittsburgh - (Ohio) Test results allow Schwebel's Youngstown 
bakery operation. A Schwebel Baking Company representative announced July 23 
that the company’s Youngstown facility was expected to be brought back online by 
July 24 after an independent testing laboratory confirmed July 23 that a species of 



- 4 - 



listeria found at the plant poses no risk to human health. Schwebel voluntarily 
withdrew all products shipped from the facility and halted production during the week 
of July 21 when routine sampling by the company detected a presence of an 
undetermined species of listeria inside the plant. 

Source: http://www.wpxi.com/news/news/listeria-found-youngstown-bakery-leads- 
schwebel-br/ngk8L/ 

15. July 23, U.S. Food and Drug Administration - (National) Whole Foods Market 
recalls made-in-store items prepared with stone fruit voluntarily recalled by 
Wawona Packing Co. due to possible health risk. Whole Foods Market issued a 
recall for several made-in-store items that may contain fresh peaches, nectarines, and/or 
plums that were supplied by Wawona Packing Co. and are possibly contaminated with 
Listeria monocytogenes. The products were sold in Whole Foods Market stores using 
Whole Foods Market scale labels in all States where the stores are located except 
Florida, Washington, and Oregon. 

Source: http://www.fda.gov/Safety/Recalls/ucm406461.htm 

16. July 23, Newsroom America - (Arkansas; Mississippi) USDA designates 10 counties 
in Arkansas as primary natural disaster areas with assistance to producers in 
Mississippi. The U.S. Department of Agriculture announced July 23 that 10 Arkansas 
counties and 1 Mississippi county were designated as primary natural disaster areas due 
to recent flash flooding, excessive rain, high winds, and hail that has affected the area 
since June 29. Farmers and ranchers in those counties are eligible for disaster 
assistance. 

Source: http ://w w w . ne w sroomamerica.com/story/43 3505 .html 

17. July 22, KECI 13 Missoula; KCFW 9 Kalispell; KTVM 6 Butte - (Montana) Lightning 
kills 45 head of cattle on ranch near Darby. Forty-five head of cattle were killed 
when lightning struck a tree under which the cattle were gathered during inclement 
weather on a ranch near Darby July 14. The financial loss connected to the death of the 
cattle is estimated to be in the tens of thousands of dollars. 

Source: http://www.nbcmontana.com/news/lightning-kills-45-head-of-cattle-on-ranch- 
near-darby/27 100098 

18. July 22, U.S. Food and Drug Administration - (International) Earth Circle Organics 
recalls Organic Carob Powder for possible Salmonella contamination. The U.S. 
Food and Drug Administration announced July 22 that Earth Circle Organics, doing 
business as River Canyon Retreat, Inc., issued a recall for Organic Carob Powder after 
receiving notice from its supplier that the product may be contaminated with 
Salmonella. The products were sold to distributors and retailers in North America. 
Source: http://www.fda.gov/Safetv/Recalls/ucm406458.htm 
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Water and Wastewater Systems Sector 
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19. July 23, WCNC 36 Charlotte - (North Carolina) Heavy rains cause sanitary sewer 



spill. Authorities believe the majority of an 8,700-gallon wastewater spill into 
Richardson Creek at Wolf Pond and Marvin Watkins in Monroe was rainwater and not 
untreated wastewater after flooding July 21 led to the discharge. 

Source: http://www.wcnc.com/story/news/local/2014/07/23/heavv-rains-cause-sanitarv- 
sewer-spill/13038521/ 

20. July 23, Carteret County News-Times - (North Carolina) Swimming alerts, advisories 
lifted at area beaches. North Carolina officials lifted 6 advisories and 3 alerts against 
swimming at 9 ocean-side sites in Carteret County July 23 after test results determined 
bacteria levels in the water dropped below standards set for swimming and water play. 
Advisories and alerts were posted July 22 when test results found high levels of 
bacteria in the water. 

Source: http://www.carolinacoastonline.com/news times/article ecba0204- 1278-1 le4- 
9dcd-001a4bcf887a.html 

For additional stories, see items 13 and 35 
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Healthcare and Public Health Sector 

21. July 23, Massachusetts Attorney General’s Office - (Massachusetts; Rhode Island) 

Women & Infants Hospital to pay $150,000 to settle data breach allegations 
involving Massachusetts patients. The attorney general of Massachusetts announced 
July 23 that Women & Infants Hospital of Rhode Island agreed to pay $150,000 to 
settle allegations that it failed to protect the personal health information of 12,127 
patients in Massachusetts after an April 2012 data breach. The hospital discovered that 
19 unencrypted back-up tapes from two if its Prenatal Diagnostic Centers went missing 
in 201 1 and authorities determined that they did not properly report the breach under 
the State’s notification statute. 

Source: http://www.mass.gov/ago/news-and-updates/press-releases/2014/2014-07-23- 
women-infants-hospital.html 
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Government Facilities Sector 

22. July 24, San Francisco Bay Area News - (California) Oakland: Body bag’s opening 
creates hazmat incident at coroner’s office. Fifteen people from the Alameda County 
Coroner’s Office in Oakland were sickened July 23 after a body bag was opened 
containing a badly-decomposed corpse. A HAZMAT team evacuated the office for 
more than 1 hour and evaluated the 15 individuals before allowing employees to return 
to work. 

Source: http://www.insidebavarea.com/news/ci 26203677/oakland-coroners-office- 
evacuated-after- 1 5-complain-chemical 

23. July 24, KING 5 Seattle; Associated Press; KREM 2 Spokane - (Washington) Rain, 
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hail help tamp down wildfire; up to 52% contained. Heavy rain helped fire crews 
reach 52 percent containment July 23 of the Carlton Complex Fire that burned over 
200,000 acres in Washington. The U.S. President signed a federal emergency 
declaration for areas impacted by the wildfires. 

Source: http://www.usatodav.com/storv/news/nation/2014/07/23/washington- 



wildfires/1 3043 193/ 



24. July 23, WHAS 11 Louisville - (Kentucky) Students transported to hospital after bus 
accident on Westport Rd. An accident involving a Westport Middle School bus 
caused 7 children to be transported to an area hospital as a precaution when a car ran 
into the bus in Louisville July 23. 

Source: http://www.whas 1 1 .com/news/local/Accident-involving-school-bus-at- 
Westport-Goose-Creek-268280542.html 

[ Return to top ] 

Emergency Services Sector 

Nothing to report 
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Information Technology Sector 

25. July 24, The Register - (International) 50,000 sites backdoored through shoddy 
WordPress plugin. A researcher with Sucuri reported that around 50,000 Web sites 
were vulnerable to malware injection, defacement, and spam due to a vulnerability in 
the MailPoet plugin for WordPress. The vulnerability can affect Web sites that do not 
run MailPoet if the vulnerable plugin is present elsewhere on the same server. 

Source: 

http://www.theregister.co.uk/2014/07/24/50000 sites backdoored through shoddy wo 
rdpress plugin/ 

26. July 24, Softpedia - (International) Fake Googlebots used for layer 7 DDoS attacks. 
Incapsula issued a report that shows how malicious Web crawlers that mimic 
Googlebots to bypass security are being used for various malicious purposes. The 
majority of the fake crawlers were used for collecting marketing information while 23.5 
percent were used for application layer distributed denial of service (DDoS) attacks. 
Source: http://news.softpedia.com/news/Fake-Googlebots-Used-for-Layer-7-DDoS- 
Attacks-45 1984.shtml 

27. July 23, V3.co.uk - (International) DDoS attackers turn attention to SaaS and PaaS 
systems, Akamai reports. Akamai released its Q2 2014 Global DDoS Attack Report, 
which found a 22 percent increase in distributed denial of service (DDoS) attack 
activity in the second quarter of 2014. The report also found that around half of DDoS 
attacks targeted IT infrastructure, with vendors of cloud services such as Software-as-a- 
Service (SaaS) and Platform-as-a-Service (PaaS) being common targets. 
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Source: http://www.v3.co.uk/v3-uk/news/2356828/ddos-attackers-turn-attention-to- 
saas-and-paas-systems-akamai-reports 

28. July 23, The Register - (International) Apple fanbois SCREAM as update BRICKS 
their Macbook Airs. Users of Apple’s 2011 Macbook Air reported experiencing 
nonresponsive systems after applying a version 2.9 EFI firmware update to their 
systems, while others reported difficulties installing the update. 

Source: 

http://www.theregister.co.uk/2014/07/23/apple macbook air update bricks fanbois 
machines/ 



29. July 23, Securityweek - (International) Metro News website compromised to serve 
malware. Researchers at Websense reported July 22 that the Web site of newspaper 
Metro. us was compromised and used to redirect visitors to a malicious Web site hosting 
the RIG exploit kit. The RIG exploit kit then attempts to exploit any present 
vulnerabilities in users’ software to install a piece of malware identified as 
Win32/Simda. 

Source: http://www.securitvweek.com/metro-news-website-compromised-serve- 
malware -rig-exploit-kit 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: http://www.it-isac.org 
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Communications Sector 

30. July 23, Softpedia- (National) Wall Street Journal acknowledges system breach. 

The Wall Street Journal confirmed that its systems were compromised when an attacker 
gained access to news site’s graphics servers, but that an ongoing investigation did not 
reveal any signs of damage or tampering. An individual using the handle “wOrm” 
known for breaching the systems of CNET claimed responsibility and stated that they 
were willing to sell a database stolen in the breach for one Bitcoin. 

Source: http://news.softpedia.com/news/Wall-Street-Journal-Acknowledges-Svstem- 
B reach-45 1796.shtml 

31. July 22, Meadville Tribune - (Pennsylvania) Windstream to probe lines after major 
phone outage. At least 8,400 residences and businesses lost Windstream 
Communications phone service for approximately 12 hours July 22 when a City of 
Meadville crew cut a fiber optic cable while fixing a curb at an intersection. 

Windstream Communications officials are assessing the incident and the city’s 
configuration of the fiber optic line network infrastructure. 

Source: http://www.meadvilletribune.com/local/xl618740171/Windstream-to-probe- 
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lines-after-major-phone-outage 



For another story, see item 29 
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Commercial Facilities Sector 



32. July 23, Tampa Bay Times - (National) Tampa man accused of scamming Apple out 
of $309,768. U.S. Secret Service officials arrested and charged a Florida man for 
allegedly scamming Apple stores in 16 States out of a collective $309,768 by tricking 
clerks into accepting fake authorization codes to override a declined credit or debit 
card, a practice known as “forced sale”. The suspect is accused of running the scheme 
42 times, as well as trying to defraud a car rental company and a Seattle hotel. 

Source: http://www.tampabay.com/news/courts/criminal/tampa-man-accused-of- 
scamming-apple-out-of-309768/2 189776 

33. July 23, Fort Walton Beach Daily News - (Florida) Fire destroys new apartment 
complex. The TerraMar Apartments complex under construction in Santa Rosa Beach 
caught fire July 23, rendering the building a total loss and causing an estimated $2.75 
million in damage. The source of the fire was deemed undetermined, while fire officials 
ruled lightning, electrical, and natural gas as probable causes. 

Source: http://www.nwfdailynews.com/local/photos-fire-destrovs-new-apartment- 
complex- 1 .34945 1 

34. July 23, Arizona Republic - (Arizona) Officials: Fires set in Avondale Walmart, 
Goodyear Target. A Walmart store in Avondale was evacuated July 23 after an 
individual set a pile of clothing on fire inside the store, prompting the store to close for 
several hours while firefighters ventilated the building. Firefighters later responded to a 
nearby Target store in Goodyear after an employee found a fire inside the building, 
which also prompted a temporary closure while the store was ventilated. 

Source: http://www.azcentral.com/storv/news/local/southwest- 
vallev/2014/07/23/department-store-fires-west-vallev-abrk/13070801/ 

For additional stories, see items 4 and 9 
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Dams Sector 



35. July 23, Panama City News Herald - (Florida) Crack in main at reservoir affects 
water. Authorities shut off water at Deer Point Reservoir July 23 after a crack was 
discovered in a 36-inch water main that supplies Panama City Beach and the 
communities of RiverCamps and Lake Merial. A boil water advisory was issued for 
areas of Lake Merial and RiverCamps as a precaution. 

Source: http://www.newsherald.com/news/government/crack-in-main-at-reservoir- 
affects-water- 1.349875 
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36. July 22, Meridian Star - (Mississippi) The city of Meridian is draining Long Creek 
Reservoir. City officials reported that Long Creek Reservoir in Meridian will be 
drained July 23 until repairs can be made after the Mississippi Department of 
Environmental Quality found the lake was not safe due to a leak in the dam. 

Source: http://www.meridianstar.com/local/xl97368077/City-pulls-plug 
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About the reports - The DHS Daily Open Source Infrastructure Report is a daily [Monday through Friday] 
summary of open-source published information concerning significant critical infrastructure issues. The DHS Daily 
Open Source Infrastructure Report is archived for 10 days on the Department of Homeland Security Web site: 
http://www.dhs.gov/IPDailyReport 

Contact Information 

Content and Suggestions: Send mail to cikr.productfeedback@hq.dhs.gov or contact the DHS 

Daily Report Team at (703) 942-8590 

Subscribe to the Distribution List: Visit the DHS Daily Open Source Infrastructure Report and follow 

instructions to Get e-mail updates when this information changes . 

Removal from Distribution List: Send mail to support @ govdelivery.com . 



Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
their Web page at www.us-cert.gov . 

Department of Homeland Security Disclaimer 

The DHS Daily Open Source Infrastructure Report is a non-commercial publication intended to educate and inform 
personnel engaged in infrastructure protection. Further reproduction or redistribution is subject to original copyright 
restrictions. DHS provides no warranty of ownership of the copyright, or accuracy with respect to the original source 
material. 
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